TOTOLINK X6000R Router Command Execution

The vulnerability of the setLanCfg function /usr/sbin/shttpd of the TOTOLINK X6000R router’s microprogramming system is related to the failure to eliminate special elements used in the operating system’s command for processing the Hostname parameter. Exploiting this vulnerability allows a remote...

UTT 1250GW strcpy Buffer Overflow DoS

The vulnerability of the strcpy function in the /goform/setSysAdm function of the UTT 1250GW networking device’s microprogramming system is related to the copying of buffers without checking the size of the input data when processing the GroupName parameter. Exploiting this vulnerability could...

Rockwell Automation 1734 POINT I/O Unlimited Resource Distribution DoS

The vulnerability of Rockwell Automation’s 1734 POINT I/O software lies in its unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

GL.iNet GL-MT3000 Router snprintf Command Injection

The vulnerability of the snprintf function in the /cgi-bin/glc file of the GL.iNet GL-MT3000 router’s microprogramming system is related to the lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to inject arbitrary commands...

goform/mp Component Code Execution

The vulnerability of the mp function in the goform/mp component of the webs microprogramming system for wireless signal amplifiers from Edimax EW-7438RPn is related to an out-of-buffer operation in memory when processing the command parameter. Exploiting this vulnerability allows a remote attacke...

udhcpd Code Execution

The vulnerability of the udhcpd microprogramming system in D-Link DIR-822 A1 routers is related to the failure to implement measures to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

SkyBridge BASIC MB-A130 Router Arbitrary Command Execution Root Privileges

The vulnerability of the SkyBridge BASIC MB-A130 router’s microprogramming system lies in the lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands with root privileges...

Tenda AX-1806 Sub Function DoS

The vulnerability of the sub727F4 function in the Tenda AX-1806 router’s microprogramming system is related to buffer overflow in the stack. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

Wavlink Router Firewall Command Execution

The vulnerability of the /cgi-bin/firewall.cgi file of the Wavlink WL-WN579A3 router’s microprogramming system is related to the failure to take measures to neutralize specific elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute...

ActionD Daemon DoS

The vulnerability of the DoShellCmd function in the ActionD daemon of Avtech’s microprogramming software for IP cameras and digital/netscreen video recorders lies in insufficient validation of input data during the processing of the strCmd parameter. Exploiting this vulnerability allows a remote...

TOTOLINK N350R Form SysCmd Command Execution

The vulnerability of the /boafrm/formSysCmd component of the TOTOLINK N350R router’s microprogramming system is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

Tenda FH1202 fromNatlimit Code Execution

The vulnerability of the fromNatlimit function in the /goform/Natlimit microprogramming system for Tenda FH1202 routers is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

SEV-SNP system Information Disclosure

The vulnerability in the SEV-SNP microprogramming system of AMD graphics processors is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to access confidential information...

AMD firmware Buffer Overflow Info Disclosure

The vulnerability in the firmware of AMD graphics processors’ microprogramming system relates to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain access to confidential information...

AMD graphics processor Heap Buffer Overflow Info Disclosure

The vulnerability in the ASP microprogramming system for AMD graphics processors is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability can allow an attacker to gain access to confidential information...

Qualcomm WLAN HAL DoS

The vulnerability of the WLAN HAL microprogramming system component in Qualcomm’s embedded chips relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

TOTOLINK A720R Router Disclosure Protected Information

The vulnerability of the getInitCfg/getSysStatusCfg functions in the TOTOLINK A720R router’s microprogramming system is related to the disclosure of information. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

Tenda AC6 Router Sub_452A4 DoS

The vulnerability of the sub452A4 function in the Tenda AC6 router’s microprogramming system is related to the operation of writing data outside the buffer in memory when processing the callback parameter. Exploiting this vulnerability can allow an attacker to cause a service failure...

ABB AC 800M Arbitrary Command Execution

The vulnerability of the ABB AC 800M controller’s microprogramming software is related to errors in processing input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands by sending specially crafted MMS packets remotely...

TZ Secure OS system Code Execution

The vulnerability of the TZ Secure OS microprogramming system in embedded Qualcomm chips is related to deficiencies in access control mechanisms. Exploiting this vulnerability could allow an attacker to execute arbitrary code...